Vulnerability Details CVE-2020-28642
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2020-28642
-
cpe:2.3:a:infinitewp:infinitewp:-
-
cpe:2.3:a:infinitewp:infinitewp:2.4.2
-
cpe:2.3:a:infinitewp:infinitewp:2.4.3